Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/i7e88REZIOCxR1OxendrEYYVqcE.roa
File: i7e88REZIOCxR1OxendrEYYVqcE.roa (raw, json)
Hash identifier: NlgmAK3hiLBR5dH57/MCWPhaMtt4b6Gh+Scb1REySlY=
Subject key identifier: 8B:B7:BC:F1:11:19:20:E0:B1:47:53:B1:7A:77:6B:11:86:15:A9:C1
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 0194221FB341BCFEE47378980B53E9B839BD
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/i7e88REZIOCxR1OxendrEYYVqcE.roa
Signing time: Wed 01 Jan 2025 13:48:10 +0000
ROA not before: Wed 01 Jan 2025 13:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212887
IP address blocks: 213.192.113.0/24 maxlen: 24
213.192.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b3:41:bc:fe:e4:73:78:98:0b:53:e9:b8:39:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bb7bcf1111920e0b14753b17a776b118615a9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:5a:62:c4:f3:7b:52:ba:75:23:82:54:07:
d9:9e:2a:82:52:0c:66:e9:de:a2:48:85:90:69:6e:
42:ef:66:ae:1d:08:06:f7:a5:89:68:5a:84:be:ab:
5f:8b:6c:3b:66:21:f1:b4:1e:f8:0a:35:ae:e1:56:
b1:07:99:b4:6e:3a:46:91:ad:38:0c:eb:0d:6a:c0:
8b:b5:84:42:a2:d4:86:62:d1:63:14:fa:ff:59:0c:
3b:56:a3:27:d2:7c:70:63:d4:83:3b:46:a7:dc:95:
bf:ae:78:6e:d2:19:f3:76:98:73:9e:2e:b4:1f:e7:
de:5c:05:74:34:04:00:48:00:94:cc:2f:56:be:f2:
a2:82:be:59:7d:f1:99:87:f1:ae:3b:b7:ac:45:6b:
ef:96:f2:84:46:b0:7e:47:7e:70:1a:74:28:0e:3a:
38:f7:87:04:b2:cf:9b:4f:98:3d:b8:c9:49:85:75:
d2:4e:be:76:fe:5d:83:3e:19:c0:08:ce:b5:c5:d2:
7c:ff:37:70:ad:07:d4:0d:94:89:0e:36:2a:5c:5d:
82:78:bc:3e:14:52:fe:60:38:22:cf:e0:e0:ac:2f:
de:88:cd:a9:19:78:6f:56:52:c4:93:20:ed:c3:0c:
e2:44:a0:50:2c:dc:ac:9f:6e:53:ef:a6:e8:78:73:
f5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B7:BC:F1:11:19:20:E0:B1:47:53:B1:7A:77:6B:11:86:15:A9:C1
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/i7e88REZIOCxR1OxendrEYYVqcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.192.113.0-213.192.114.255
Signature Algorithm: sha256WithRSAEncryption
41:61:5b:bf:0d:f2:46:ea:e8:3f:3b:81:cf:6a:85:8f:27:70:
47:7a:c2:58:cd:9e:02:d2:f7:4d:bb:17:d8:74:b3:8d:36:9b:
16:85:c4:c1:d3:05:5d:13:db:71:6b:f1:11:0e:bb:60:d6:2a:
62:c5:3f:fd:73:63:a4:f8:3e:87:41:bb:9f:99:98:22:30:9f:
c6:3e:a5:55:a7:ab:1f:f6:28:1a:69:7f:5e:eb:0d:cc:27:f3:
e4:94:84:61:c2:43:17:e9:39:57:28:5e:d2:fc:c6:00:e6:1b:
76:b4:88:60:b2:ec:55:17:5e:13:b4:20:09:02:e8:13:b0:d8:
df:16:17:a1:d4:f6:63:0e:e5:6e:09:0c:f2:cb:06:ee:ab:c1:
98:81:27:6c:d1:1c:9f:a7:3e:b5:a4:db:39:6a:60:79:2e:a4:
76:53:d1:6b:3c:38:4e:3b:09:da:af:59:54:ee:c0:db:ea:0e:
74:a7:02:90:e5:76:48:61:4f:f1:cf:0a:b3:71:1a:ed:3f:1b:
56:3e:ee:ee:2b:a7:3c:6a:07:97:b1:6d:89:c0:23:2e:6d:48:
d9:bd:ee:9a:e0:07:14:66:0d:ff:c9:45:17:63:e0:24:79:d4:
0c:ae:1b:ee:8e:1f:60:f5:7b:31:93:f6:c0:1c:37:3a:63:ec:
21:82:94:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:27 2025 by rpki-client